SB2026091787 - Race condition in Linux kernel qcom iris driver

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-89869)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause VPU hardware registers to be accessed after power-off.

The vulnerability exists due to a race condition in the Qualcomm Iris VPU driver's iris_vpu_power_off() function when a threaded IRQ handler remains queued during VPU power-off. A local user can trigger VPU power-off while a threaded IRQ handler is queued to cause VPU hardware registers to be accessed after power-off.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/b9c2215bdedc9c532a7e9d57ec49ee1b6381f863
• https://git.kernel.org/stable/c/d7f34cbaced92069400fc5d71fefe3cb4c748da8
• https://git.kernel.org/stable/c/ff98cd2b8b54cf96bccace2f7b7e4775cdccaf02